miracum / fhir-pseudonymizer

A REST service to pseudonymize and anonymize FHIRยฎ resources.
MIT License
15 stars 2 forks source link

chore(deps): update github-actions #196

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 2 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/upload-artifact action patch v4.3.5 -> v4.3.6
github/codeql-action action minor v3.25.15 -> v3.26.2
miracum/.github action minor v1.11.4 -> v1.12.0

Release Notes

actions/upload-artifact (actions/upload-artifact) ### [`v4.3.6`](https://togithub.com/actions/upload-artifact/compare/v4.3.5...v4.3.6) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v4.3.5...v4.3.6)
github/codeql-action (github/codeql-action) ### [`v3.26.2`](https://togithub.com/github/codeql-action/compare/v3.26.1...v3.26.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.26.1...v3.26.2) ### [`v3.26.1`](https://togithub.com/github/codeql-action/compare/v3.26.0...v3.26.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.26.0...v3.26.1) ### [`v3.26.0`](https://togithub.com/github/codeql-action/compare/v3.25.15...v3.26.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.15...v3.26.0)
miracum/.github (miracum/.github) ### [`v1.12.0`](https://togithub.com/miracum/.github/releases/tag/v1.12.0) [Compare Source](https://togithub.com/miracum/.github/compare/v1.11.4...v1.12.0) ##### Features - upload slsa attestation to releases ([#​75](https://togithub.com/miracum/.github/issues/75)) ([a4eaba9](https://togithub.com/miracum/.github/commit/a4eaba9236579e026f335874deae5bc70651c15c)) ##### Miscellaneous Chores - use best-practices preset ([aca53b6](https://togithub.com/miracum/.github/commit/aca53b63036f2744074cf4a57c24939896d1f7f6))

Configuration

๐Ÿ“… Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

๐Ÿšฆ Automerge: Disabled by config. Please merge this manually once you are satisfied.

โ™ป Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

๐Ÿ‘ป Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 2 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

โš ๏ธ Warning: custom changes will be lost.

github-actions[bot] commented 2 months ago

Trivy image scan report

ghcr.io/miracum/fhir-pseudonymizer:pr-196 (ubuntu 24.04)

4 known vulnerabilities found (LOW: 4 CRITICAL: 0 HIGH: 0 MEDIUM: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libssl3t64 CVE-2024-2511 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-4603 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-4741 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2
libssl3t64 CVE-2024-5535 LOW 3.0.13-0ubuntu3.1 3.0.13-0ubuntu3.2

No Misconfigurations found

opt/fhir-pseudonymizer/FhirPseudonymizer.deps.json

No Vulnerabilities found

No Misconfigurations found

opt/fhir-pseudonymizer/packages.lock.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/8.0.7/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.7/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

github-actions[bot] commented 2 months ago

Code Coverage

Package Line Rate Branch Rate Health
FhirPseudonymizer 74% 65% โœ”
FhirPseudonymizer.Tests 100% 100% โœ”
Summary 81% (816 / 1008) 68% (93 / 136) โœ”

Minimum allowed line rate is 50%


iter8 report


Experiment summary:
*******************

  Experiment completed: true
  No task failures: true
  Total number of tasks: 7
  Number of completed tasks: 7
  Number of completed loops: 1

Whether or not service level objectives (SLOs) are satisfied:
*************************************************************

  SLO Conditions                 | Satisfied
  --------------                 | ---------
  http/error-count <= 0          | true
  http/latency-mean (msec) <= 25 | true
  http/latency-p99 (msec) <= 85  | true

Latest observed values for metrics:
***********************************

  Metric                     | value
  -------                    | -----
  http/error-count           | 0.00
  http/error-rate            | 0.00
  http/latency-max (msec)    | 955.12
  http/latency-mean (msec)   | 15.87
  http/latency-min (msec)    | 2.09
  http/latency-p50 (msec)    | 7.95
  http/latency-p75 (msec)    | 12.86
  http/latency-p90 (msec)    | 55.08
  http/latency-p95 (msec)    | 65.21
  http/latency-p99 (msec)    | 77.69
  http/latency-p99.9 (msec)  | 116.67
  http/latency-stddev (msec) | 23.23
  http/request-count         | 25000.00
github-actions[bot] commented 2 months ago

๐Ÿฆ™ MegaLinter status: โš ๏ธ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
โœ… ACTION actionlint 5 0 0.09s
โœ… BASH bash-exec 1 0 0.37s
โœ… BASH shellcheck 1 0 0.05s
โœ… BASH shfmt 1 0 0.0s
โœ… CSHARP csharpier 95 0 4.35s
โš ๏ธ CSHARP roslynator 3 2 43.81s
โœ… DOCKERFILE hadolint 1 0 0.09s
โœ… EDITORCONFIG editorconfig-checker 181 0 1.0s
โœ… JSON jsonlint 27 0 0.27s
โœ… JSON prettier 27 0 2.75s
โœ… JSON v8r 27 0 10.81s
โœ… MARKDOWN markdownlint 4 0 0.71s
โœ… PROTOBUF protolint 4 0 7.1s
โœ… REPOSITORY checkov yes no 16.68s
โœ… REPOSITORY dustilock yes no 0.01s
โœ… REPOSITORY gitleaks yes no 0.32s
โœ… REPOSITORY git_diff yes no 0.15s
โœ… REPOSITORY grype yes no 14.77s
โœ… REPOSITORY kics yes no 20.9s
โœ… REPOSITORY secretlint yes no 1.49s
โœ… REPOSITORY syft yes no 0.67s
โœ… REPOSITORY trivy yes no 9.69s
โœ… REPOSITORY trivy-sbom yes no 1.6s
โœ… REPOSITORY trufflehog yes no 5.76s
โœ… XML xmllint 2 0 0.01s
โœ… YAML prettier 29 0 3.82s
โœ… YAML v8r 29 0 36.0s
โœ… YAML yamllint 29 0 3.47s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

miracum-bot commented 2 months ago

:tada: This issue has been resolved in version 2.21.15 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: